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' 1. A computer-based method for identifying common accounts, the method 
comprising: 

assigning a first user identifier to a first account, the first account being 
associated with a first node; 

assigning a second user identifier to a second account, the second account 
being associated with a second node; 

receiving a request from th'e second node that includes the first user identifier, 

when the first account is not already associated to the second node, 

determining whetl/er the first and second accounts represent the same 

account; and 

when it is deterrfuned that the first and second accounts represent the 
same account, combining the first andf second accounts into a single account. 



2. The method of /claim 1 wherein the determining includes requesting a 
user to indicate whether the first and second accounts represent the same account. 



1 3. The method oi claim 2 including identifying the second account to the 

2 user by specifying a user name associated with the second account. 

1 4. The method of claim 2 wherein when the user indicates that the first and 

2 second accounts represent the same account, requesting that the user provide credentials 

3 associated with the second account. 



1 5. The method 

2 the first account is the same as the 



d>f claim 1 wherein each account has a user and the user of 
user of the second account 



[3 1 476-8005/SL003769.269] 



-19- 



12/22/00 




1 6. The method of claiA 1 wherein each account has a user and the user of 

2 the first account is not the same as the user of the second account. 

1 7. A method of claim I wherein the combining includes deleting one of the 

2 accounts and assigning the user identifier assigned to the deleted account to the remaining 

3 account. 



1 8. The method of claim 7 including associating with the remaining account 

2 a resource that was associated with the deleted account. 



1 9. The method of claim 1 including: 

2 when it is determined /that the first and second accounts do not represent the 

3 same account, associating the first acjcount with the second node. 

1 10. A computer-b&sed method of generating a common account, one 

2 account being associated with a node, the method comprising: 

3 receiving at the node information relating to an account; and 

4 when the account to which the information is related is not currently associated 

5 with the node, 

6 determining whether the account associated with the node and the node 

7 not currently associated with the node should be common accounts; and 

8 when it is determined that the accounts should be common accounts, 

9 directing the combining the accounts into a single account. 

1 11. The method of claim 10 wherein the determining includes requesting a 

2 user to indicate whether the accounts are common accounts. 



1 12. The method 

2 the account associated with the 

3 that account. 



of claim 1 1 wherein the determining includes identifying 
npde to the user by specifying a user name associated with 
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1 13. The method of claim 

2 more user identifiers. 



10 wherein each account is associated with one or 



1 14. The method of claim 13 wherein the information relating to the account 

2 is a user identifier associated with the account. 



1 15. The method of claim! 10 including determining that the account to which 

2 the information is related is not currently^ associated with the node by receiving an indication 

3 of that account from another computer. 
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16. A method in a computer system for identifying common accounts, the 
method comprising: 

receiving a user identified from a user; 

sending a log on request to a server computer, the request including the 
received user identifier, but not including an account identifier; 

receiving a log on respcnse from the server, the response including an account 
identifier associated with the receivec user identifier; and 

when the received acc ount identifier does not match an account identifier 
previously stored at the node, promj ting the user to indicate whether the account identified 
by the received account identifier should be the same account as an account identified by an 
account identifier previously stored at the node. 



17. The method of 



claim 16 including when the user indicates that the 



accounts should be common accounts, sending a log on request to the server computer, the 



request including the received user 
the node. 



identifier and an account identifier previously stored at 



1 18. The method of 

2 one account identifier was previousl y 
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19. A method in a computer system for authorizing access to applications, 
each application having an applicatior identifier, the method comprising: 

receiving a plurality of user identifier and application identifier pairs; 
for each pair received storing the user identifier in association with the 
application identifier; 

access an application, the request including a user 
identifier and application identifier p^ir, the application identifier identifying the application 
to be accessed; and 

* and application identifier pair of the request match a 
identifier pair, indicating that access to the application 



when the user identifie 
stored user identifier and application 
is authorized. 



20. The method of o 



aim 19 wherein the requested access is execution of the 



application. 



21. The method of claim 19 wherein the plurality of user identifier and 
application identifier pairs are received in requests to access the application identified by the 
application identifier of the pair. 



22. The method 
application identifier pair of the 
application identifier pair, indicate; 



<[)f claim 19 including when the user identifier and 
request does not match a stored user identifier and 
I that access to the application is not authorized. 



23. The method of claim 19 wherein access is authorized for applications 
developed by different application developers. 

24. The method of claim 19 wherein the request is received and the 
authorization is indicated before stirting execution of the requested application. 



25. The method 
plurality of client computers. 
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26. The method of claijm 19 wherein each application identifier and user 
identifier pair includes a password and indicating that access to the application is authorized 
only when the request includes a password that matches the password for the application 



identifier and user identifier pair of the 
pairs. 



27. 



plurality of application identifier and user identifier 



A method in a computer system for authorizing access to different 
applications, each application having ai application identifier, the method comprising: 
receiving a plurality of user identifier and application identifier pairs; and 
for each pair received, I 

sending the received user identifier and application identifier pair to an 
authorization system; I 

receiving from tne authorization system an indication whether access to 
the application identified by the application identifier is authorized. 



28. The method of 
user identifier and application identifier 
identifier is authorized to access the 



claim 27 wherein the authorization system maintains 
pairs that indicate the user identified by the user 
application identified by the application identifier. 



29. The method of claim 27 wherein the receiving includes receiving a 
password that is sent to the authorization system wherein authorization is indicated only 



when the sent password matches a 



user identifier and application identifier pair 



password stored at the authorization system for the sent 



30. A method in 



each resource having a resource identifier, the method comprising: 



a computer system for authorizing access to a resource, 



providing a plurality 
identifier and resource identifier 
access the identified resource: 



of user identifier and resource identifier pairs, each user 
pair indicating that the identified user is authorized to 
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6 receiving a request to accessia resource, the request including a user identifier 

7 and resource identifier pair, the resource identifier identifying the resource to be accessed; 

8 and 

9 when the user identifier and resource identifier pair of the received request 

10 match a provided user identifier and resojurce identifier pair, indicating that access to the 

1 1 resource is authorized. 



l 31. The method of claim/30 wherein the resource is computer data. 

1 32. The method of cla/m 30 wherein the resource is a communications 

2 channel. 



1 33. The method of dlaim 30 wherein the indicating that access to the 

2 resource is authorized occurs after performing authentication for the identified user. 
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34. The method of claim 33 wherein the authentication includes comparing 
a received password with a passwprd associated with the matched user identifier and 
resource identifier pair. 



comprising: 



35. A method in a/ computer system for managing accounts, the method 
assigning an account tjo a node; 

receiving from the mode a request to access a computer resource that is 
associated with an account that is not assigned to the node; and 

in response to receiwng the request, assigning the account associated with the 
computer resource to the node so mat the computer resource can be accessed from the node. 



1 36. The method 

2 application. 



1 37. The method 

2 is complete, un-assigning the account 
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of claim 35 wherein the computer resource is an 



of claim 35 including after access to the computer resource 
associated with the computer resource from the node. 
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1 38. The method 

2 represent accounts of different users 



of cllim 



l 



2 data. 



40. The method of c 



35 wherein the accounts associated with the node 



39. The method of clai n 35 wherein the nodes are computers. 



rim 35 wherein the computer resource is computer 



41 . The method of claim 35 wherein the computer resource is a user. 



42. The method of 
communications channel. 



claim 35 wherein the computer resource is a 



43. A method in a omputer system accessing a computer resource, the 
method comprising: 

assigning a different accdunt to each of a plurality of nodes; 
receiving from a node i notification that a user has requested to access a 



5 computer resource that is associated with an account that is assigned to another node; and 



in response to receiving 
associated with the computer resource 
resource from the node. 



44. The method of claim 
complete, all information relating to 
node. 



1 45. The method of c 

2 complete, un-assigning the account 



the notification, temporarily assigning the account 
to the node so that the user can access the computer 



43 wherein after access to the computer resource is 
he temporarily assigned account is removed from the 



aim 43 wherein after access to the computer resource is 
frbm the node. 
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1 46. A method in a computer system for tracking use of applications, the 

2 method comprising: 

3 receiving from a client computer a request to access an application, the 

4 requests including an application identifier and user identifier; 

5 determining whether the user i'dentifier is associated with an account; 

6 when the user identifier is associated with an account, 

7 sending to an authorization computer a request to authorize access to the 

8 application, the request including the user ipentifier; and 

9 upon receiving a response indicating that access is authorized, sending 

10 to the client computer a response indicating that access is authorized. 



1 47. The method of claim 46 wherein the request received from the client 

2 computer includes a password that is sent to the authorization system. 
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48. The method of claiip 46 including sending the application identifier to 
the authorization system. 

49. A method in a copputer system for managing account, the method 

comprising: 

receiving a plurality of usir identifiers; 
associating the user identifiers with a single account; 

receiving attributes when a user is logged on with one of the user identifiers 
associated with the single account; and 

providing those received! attributes when a user is logged on with another of the 
user identifiers associated with the single account. 



1 50. The method of 

2 relating to access to an application. 



claim 49 wherein the attributes includes preferences 



51. The method of claim 51 whereby the attributes are associated with the 
2 single account rather than an single iker identifier. 
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1 52. A computer-readable /medium containing instructions for causing a 

2 computer system to generate common account, one account being associated with a node, by 

3 a method comprising: 

4 receiving at the node information relating to an account; and 

5 when the account to which the information is related is not currently associated 

6 with the node, 

7 determining whetherlthe account associated with the node and the node 

8 not currently associated with the node should be common accounts; and 

9 when it is determined that the accounts should be common accounts, 

10 directing the combining the accounts intq a single account. 



1 53. The computer-readable medium of claim 52 wherein the determining 

2 includes requesting a user to indicate whether the accounts are common accounts. 




ill 

Hi 



54. The computer-readable medium of claim 53 wherein the determining 
includes identifying the account associated with the node to the user by specifying a user 
name associated with that account. 



55. The computer-rea 
associated with one or more user identi 



'able medium of claim 52 wherein each account is 



rers. 



1 56. The computer-readable medium of claim 55 wherein the information 

2 relating to the account is a user identifier associated with the account. 



57. The computer-re 
the account to which the information 
receiving an indication of that accoun ; 



1 58. A computer sys 

2 being associated with a node, compri 

3 means for receiving at 
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dable medium of claim 52 including determining that 
is related is not currently associated with the node by 
from another computer. 



tern for generating a common account, one account 
ing: 

tlhe node information relating to an account; and 

-27- 12/22/00 



4 means for, when the account to which the information is related is not currently 

5 associated with the node, determining whether the account associated with the node and the 

6 node not currently associated with the node should be common accounts; and when it is 

7 determined that the accounts should be common accounts, directing the combining the 

8 accounts into a single account. 

1 59. The computer systerA of claim 58 wherein the means for determining 

2 includes requesting a user to indicate whether the accounts are common accounts. 



1 60. The computer system of claim 59 wherein the means for determining 

2 includes means for identifying the accoupt associated with the node to the user by specifying 

3 a user name associated with that account. 
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61. The computer sysjcem of claim 58 wherein each account is associated 
with one or more user identifiers. 

62. The computer system medium of claim 61 wherein the information 
relating to the account is a user identifier associated with the account. 



63. The computer 
determining that the account to whi 
with the node by receiving an indication 



system medium of claim 58 including means for 
h the information is related is not currently associated 
of that account from another computer. 



64. A computer-readable medium containing instructions for controlling a 
computer system to authorize access to different applications, each application having an 
application identifier, by a method comprising: 

receiving a plurality cf user identifier and application identifier pairs; and 

for each pair received, 

sending the re :eived user identifier and application identifier pair to an 



authorization system; 



receiving fron 



the application identified by the ap olication identifier is authorized 
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65. The computer-readable medium of claim 64 wherein the authorization 
system maintains user identifier and application identifier pairs that indicate the user 
identified by the user identifier is authorized to access the application identified by the 
application identifier. 



66. The computer-readable 
includes receiving a password that is sent t 



medium of claim 64 wherein the receiving 
the authorization system wherein authorization 



is indicated only when the sent password matches a password stored at the authorization 
system for the sent user identifier and application identifier pair. 

67. A computer-readable/ medium for controlling a computer system to 
authorize access to a resource, each resfource having a resource identifier, by a method 
comprising: 

providing a plurality of usefr identifier and resource identifier pairs, each user 
identifier and resource identifier pair indicating that the identified user is authorized to 
access the identified resource; 

receiving a request to accefss a resource, the request including a user identifier 
and resource identifier pair, the resource identifier identifying the resource to be accessed; 
and 

when the user identifier /and resource identifier pair of the received request 
match a provided user identifier and Resource identifier pair, indicating that access to the 
resource is authorized. 



68. The computer-readable medium of claim 67 wherein the resource is 



computer data. 



69. The computer-readable medium of claim 67 wherein the resource is a 
communications channel. 
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70. The computer-readable medium of claim 67 wherein the indicating that 
access to the resource is authorized occurs after performing authentication for the identified 
user. 

71. The computer-readable medium of claim 67 wherein the authentication 
includes comparing a received password wii h a password associated with the matched user 
identifier and resource identifier pair. 



72. A method in a client cjomputer for coordinating registration of a user 
with a server computer, comprising: 



receiving a user identifier and 
when the client computer has 
prompting the user to 
associated with the previously cached user 



an indication that the user is a new user; 
previously cached that user identifier, 
indicate whether the user is the same as the user 
dentifier; 



when the user indicates that the user is not the same, allowing the user 
to enter a new user identifier; and 

when the user indicafes that the user is the same user, coordinating log 

on of the user; and 

when the client computer h^s not previously cached that user identifier, 
registering the user; 

when the registration is successful, caching the user identifier and 
coordinating log on of the user. 



73 . A method in a client computer for log on of a user, comprising: 
receiving a user identifier land password; 

sending a log on request to a server computer, the request including an account 
identifier when the client computer has an account identifier associated with the received 
user identifier; 

when a response indicating that the log on was successful is received, the 
response including an account identifi sr, 
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when the account identifier does not match an account identifier 
previously cached at the client compi ter, prompting the user whether the received account 
identifier and a previously cached account identifier represent the same account; and 

when the user indicates that the accounts represent the same account, 
combining the accounts. 
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